CVE-2026-20032

A vulnerability in the Python interpreter of Cisco NX-OS Software allows an authenticated, local attacker with low privileges to escape the Python sandbox . The root cause is insufficient validation of user-supplied input , which can be exploited by manipulating specific functions within the inte...

CVE-2026-20032 Cisco NX-OS Software Python Sandbox Escape Vulnerability

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

EUVD-2026-94447

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

Cisco NX-OS Software Python Sandbox Escape Vulnerability

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CVE-2015-1635_PoC

usage: python3 CVE-2015-1635PoC.py e.g. python3 CVE-2015-1635PoC.py http://www.xxx.com...

CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

EUVD-2026-94383

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

CVE-2026-107204

LMCache versions through 0.5.5 are vulnerable to an unauthenticated remote code execution (RCE) vulnerability via the /run_script endpoint. The root cause is that attackers can post scripts to this endpoint and recover real builtins through the injected FastAPI app object , which allows them to b...

EUVD-2026-94371

Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdownextensions configuration. An authenticated attacker who can register or influence an SCM-backed documentation...

CVE-2025-24893_Shell

2025-24893Shell requisitos: httpx uso: python exploit.py victim.com...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal Servicios Web RESTful RCE Implementación en Python del exploit de ejecución remota de código para CVE-2019-6340, basado en el análisis del módulo de Metasploit y del trabajo previo de leonjza. Diferencia clave con EDB-46459: usa POST en lugar de GET, evitando la caché de...

CVE-2021-40438-POC

Nota: Diseñado únicamente para fines educativos y de pruebas controladas. Solo pruebe en sistemas para los que tenga permiso de evaluación. CVE-2021-40438 - Explotación SSRF ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

regipy

regipy ⚠️ v6.0.0 में ब्रेकिंग बदलाव संस्करण 6.0.0 में महत्वपूर्ण आधुनिकीकरण परिवर्तन शामिल हैं: Python 3.9+ आवश्यक - Python 3.6, 3.7, और 3.8 के लिए समर्थन हटा दिया गया attrs लाइब्रेरी हटा दी गई - डेटा क्लासेस अब Python के अंतर्निहित dataclasses मॉड्यूल का उपयोग करते हैं यदि आपका कोड आंतरिक...

CVE-2022-22965

spring4shell ⭐ una implementación python de CVE-2022-22965 que proporciona un prompt al usuario al estilo de una sesión SSH. El script está diseñado para ser fácil de entender y ejecutar, con legibilidad y accesibilidad, según la elección del usuario. Diseñado para explotar la vulnerabilidad en...

Deserializer

Deserializer About the Project Deserializer is an advanced Abstract Syntax Tree AST static analysis engine designed to identify insecure object reconstruction and state persistence sinks across the Python ecosystem, with strong focus on AI, LLM, Robotics, Data Science, Machine Learning and Deep...

cve-2023-37635

CVE-2023-37635 - Exploitation Guide Installation & Setup 1️⃣ Install Dependencies pip install -r requirements.txt 2️⃣ Run the Exploit With a proxy: python brutForc.py Without a proxy: python brutForc.py -n Notes: Replace with the target URL. The -n flag disables proxy usage. ⚠️ Disclaimer : This...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 El Exploit toolkit CVE-2017-0199 es un práctico script de Python que proporciona a pentesters e investigadores de seguridad una forma rápida y eficaz de probar RCE en Microsoft Office. Puede generar un archivo RTF/PPSX malicioso y entregar metasploit / meterpreter /...